Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: 6NBbygjsDBkHznx51ueI4EOsARZAvLKYpGjJ9pGpA1k=
Subject key identifier: C3:56:8D:A6:A8:3C:B1:34:46:5E:E5:B0:90:F9:B6:79:CD:B0:D6:C9
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 01992255C8F9BE35B808C11048D8AD5E4F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 138A
Signing time: Sun 07 Sep 2025 04:01:11 +0000
Manifest this update: Sun 07 Sep 2025 04:01:11 +0000
Manifest next update: Mon 08 Sep 2025 04:01:11 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: Q0Gy20n6t3zQ27mVwC0b03a7VbFwa+wWKMduveWY+dg=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c8:f9:be:35:b8:08:c1:10:48:d8:ad:5e:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Sep 7 04:01:11 2025 GMT
Not After : Sep 8 04:01:11 2025 GMT
Subject: CN=c3568da6a83cb134465ee5b090f9b679cdb0d6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:84:86:05:ec:81:b1:fd:55:68:eb:2d:15:
ae:6d:58:c4:e0:cf:db:e0:56:38:8e:46:c9:ab:d1:
f4:df:c0:ac:50:4c:f6:87:6e:fb:08:4d:31:24:a8:
6d:bd:b8:51:2a:cc:d2:59:eb:07:1d:f0:1e:1e:2a:
d2:f0:05:b5:82:c4:98:67:d4:53:63:f4:0b:45:66:
99:98:a1:cb:78:f3:53:75:ca:6c:54:81:64:7e:b4:
e3:09:55:fc:62:38:f5:fe:45:f0:86:9a:c0:c1:67:
c1:e1:ed:28:a7:63:d8:a4:82:b3:9d:8b:c7:55:7c:
3e:66:66:5a:23:7a:5f:37:fb:fb:00:c4:b3:70:e0:
b1:01:97:e8:42:2a:60:78:73:71:2e:cf:4e:0b:50:
66:84:79:0a:cb:81:ae:42:84:8a:b1:89:2a:08:13:
eb:34:a7:58:e5:da:8e:0b:42:8b:51:b5:10:13:ac:
a6:69:07:a4:32:25:69:cd:75:52:22:5f:ed:26:a0:
8b:f8:08:44:bc:6e:b0:2d:29:54:db:d3:16:37:d7:
c8:b2:10:0c:94:37:f2:7f:c4:43:9d:ec:56:7b:f5:
bc:91:9c:d5:84:c9:32:e9:c7:03:8d:5d:d6:d8:43:
04:6c:8f:63:0d:2f:04:77:92:ab:0f:d5:e3:57:90:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:8D:A6:A8:3C:B1:34:46:5E:E5:B0:90:F9:B6:79:CD:B0:D6:C9
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:67:5a:d7:8e:70:b7:10:2a:0d:f5:8c:55:fb:a3:32:5c:
c3:f2:4b:02:bc:84:ea:de:c8:2f:41:01:36:fb:63:77:6f:4a:
8d:80:59:d9:5c:dc:cd:19:ce:59:d5:93:31:fb:6f:d3:34:b8:
f5:30:57:2f:48:1d:2d:f5:00:45:ab:8d:19:91:50:3f:a0:e0:
aa:a0:66:4f:0e:c9:0c:47:56:39:ec:47:b7:03:df:86:2b:c9:
ea:6f:17:e6:7b:ea:f5:e6:7d:fc:cd:8b:c8:4e:e1:40:0e:44:
51:50:47:7c:a9:0c:ac:56:f4:96:31:cf:58:a0:0c:26:4d:4b:
cc:96:36:a2:35:7e:75:c9:c3:2a:96:91:61:bb:64:07:b6:ed:
70:98:b2:36:d4:05:eb:9f:55:08:a9:55:3e:58:bd:53:a9:a8:
a5:28:05:dc:76:21:a3:54:f3:19:19:f1:94:99:37:2f:2f:4f:
9c:6e:a0:7c:6d:56:f8:14:a9:69:22:f0:19:43:34:30:9c:08:
79:60:ea:09:67:85:29:68:a1:b0:14:2c:02:fd:89:b4:f7:30:
67:a2:a9:25:e6:4c:4c:d0:63:70:a9:c2:fb:c7:9c:f2:6f:5a:
a8:f0:12:67:7a:77:bf:2a:e8:3a:aa:af:40:18:ad:f2:20:f7:
98:5f:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client